3+ years of experience supporting RMF authorization activities, such as NIST SP 800-37 or SP 800-53, on DoD or IC information systems
Experience with continuous monitoring tooling such as ACAS, Nessus, SCAP, or STIG Viewer, and vulnerability remediation coordination
Experience with categorization methodology under FIPS 199 and NIST SP 800-60, and with impact-level determinations for classified or national security systems under CNSSI 1253
Knowledge of eMASS, including package population, artifact management, POA&M; tracking, and control inheritance or hybrid control management
TS/SCI clearance
HS diploma or GED
Information Security Certification, including CEH, CISM, CCSP, CCSK, CISSP, or CompTIA Security+ Certification
Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information; TS/SCI clearance is required.
